The host header should not be able to be set by the user. It should always be populated by reqwest / hyper.